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• Hundreds of residents in Mishawaka, Indiana, returned home September 15 after a 
chemical fire at a vacant plant in the midst of a federal cleanup forced them, and many area 
businesses to evacuate. - Associated Press (See item 5) 

• A deadly, drug-resistant superbug outbreak that began during the 2011 summer at the 
National Institutes of Health Clinical Center claimed its seventh victim September 7. - 
Washington Post (See item 21) 

• Government safety regulators are investigating nearly 200,000 Ford Crown Victoria police 
cars due to complaints about defective steering columns. - Associated Press (See item 27) 

• Microsoft researchers investigating counterfeit software in China found that new systems 
being booted for the first time were already compromised with botnet malware. - PCWorld 
(See item 35) 

• A man accused of trying to detonate a car bomb outside a bar in Chicago was scheduled to 
appear in federal court September 17. - Associated Press; WMAQ 5 Chicago (See item 42) 
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Energy Sector 



1. September 16, Associated Press - (Washington; Idaho) Wire thieves creep through 
Idaho, Washington State. Thieves in northern Idaho and eastern Washington State are 
still targeting copper wire for the scrap market despite lower metal prices and 
electrocution risks, power company officials say. Officials tell the Spokane 
Spokesman-Review that thieves cause higher electricity bills for customers and 
endanger the public by leaving live wires. The communications manager for Avista 
Utilities said thieves have cut down live lines and climbed substation fences to steal 
equipment that could kill them. He said the company recently discovered copper 
grounding wire, worth about $200 on the scrap metal market, missing from about 60 
poles in rural areas north and south of Coeur d’Alene, Idaho. He said it will cost about 
$10,000 to replace ground wires, with ratepayers paying for the thefts. He also said the 
missing grounding wire means line crews do not have a safety guard to tie into while 
working on the poles. And if a storm or car crash knocks down a pole, the wires might 
not de-energize properly. In addition, voltage fluctuations can be caused by improperly 
grounded power lines that can damage home electronics. 

Source: 

http ://seattletimes .com/html/localne ws/20 19173847 ap wawirethie ves 1 stldwritethru .ht 
ml 

2. September 15, KTUU 2 Anchorage - (Alaska) Schlumberger building in Nikiski 
damaged in fire. Fire crews with the Nikiski Fire Department in Anchorage, Alaska 
battled flames and smoke at a commercial structure fire September 14. According to 
officials, the Schlumberger building caught fire just before 8 p.m. Crews were able to 
get everything under control before just over an hour and a half. The fire department 
said no employees were inside at the time of the fire but there was heavy smoke and 
fire damage to the building. Crews determined the fire started in the back of the oil 
field services facility, possibly by an oil waste heater that was being used. 

Source: http://articles.ktuu.com/2012-09-15/fire-crews 33868136 

3. September 15, Los Angeles Times - (California) Black smoke from refinery is non- 
emergency, officials say. Black smoke billowing into the sky in the Wilmington 
section of Los Angeles September 15 was the result of a non-emergency flaring 
operation at the Conoco Phillips Refinery and did not require a response from fire 
personnel, said a Los Angeles Fire Department spokesman. The smoke could be seen 
throughout the area, prompting calls from concerned residents. A spokeswoman for 
Phillips 66, which operates the refinery, said the plant “had a complete loss of power” 
and the refinery had been shut down. The spokeswoman said the smoke was the result 
of “some product left in the line”. 

Source: http://latimesblogs.latimes.com/lanow/2012/09/black-smoke-sprewing-frorn- 
refinerv-is-non-emergencv-officials-say.html 

4. September 14, Baltimore Sun - (Maryland) Baltimore Gas and Electric officials voice 
support for burying some power lines. Baltimore Gas and Electric Co. (BGE) 
officials told State energy regulators September 13 that major changes to the electricity 
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grid, including burying some power lines and more aggressively trimming trees, are 
needed to prevent long-term outages like the one that followed the June 29 derecho. “A 
part of the solution has to be having less damage to repair,” the BGE CEO said at a 
Maryland Public Service Commission hearing on utilities’ response to the storm. 
“Undergrounding selectively has to be part of the solution.” Many power lines in newer 
communities around the State are underground, but some have discussed burying 
overhead lines in areas with many mature trees. Commissioners also pressed the utility 
to provide more information to customers and emergency responders to help the region 
better weather future mass outages. BGE officials defended their actions, calling the 
cleanup efficient despite the storm taking them and most of the State by surprise. The 
commission is reviewing all utilities’ repair efforts after the storm left more than 1 
million Marylanders without power. In BGE’s territory, 762,000 customers lost power 
for an average of 38 hours; many residents were without electricity for as many as 7-8 
days. 

Source: http://www.washingtonpost.com/local/baltimore-gas-and-electric-officials- 
voice-support-for-burying-some-power- lines/201 2/09/14/7e3c8b6a-fe68-l lei -a31e- 
804fccb658f9 story.html 

For another story, see item 6 
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Chemical Industry Sector 

5. September 17, Associated Press - (Indiana) Evacuation order lifted after Indiana 
chemical fire. Hundreds of residents in Mishawaka, Indiana, returned home early 
September 15 after a chemical fire at a vacant plant in the midst of a federally 
supervised cleanup ousted them from their homes. The all-clear was given after air 
monitoring showed it was safe for residents to return home within a 1-mile radius of the 
old Baycote factory. The Mishawaka battalion chief said the September 14 fire released 
a chemical vapor cloud of unknown substances, noting that about 200 people live or 
work at businesses in the evacuation zone. The Baycote complex was once an 
electroplating and metal-finishing business, but it has been vacant since 2008. The U.S. 
Environmental Protection Agency (EPA) began cleaning up the site in the spring of 
2012. The EPA on-scene coordinator said more than 50,000 gallons of liquid and solid 
chemicals were stored there when the cleanup started, but most of the material was 
already removed. He said chemicals that a crew put into a plastic-lined cardboard box 
self-combusted and caught fire early the evening of September 14 — hours after the 
workers left the building. He said the white cloud the fire made may have contained 
hydrogen cyanide, hydrogen sulfide, and sulfur dioxide. The fire was confined to the 
storage container. The EPA plans to analyze what caused the fire and reassess its 
approach to removing the remaining chemicals from the site, the on-site coordinator 
said. 

Source: http://www.manufacturing.net/news/2012/09/evacuation-order-lifted-after- 
indiana-chemical-fire 
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6. September 15, New Orleans Times-Picayune - (Louisiana) Toxins found near 
Stolthaven Braithwaite terminal flooded by Hurricane Isaac. The Louisiana 
Department of Environmental Quality (DEQ) announced September 14 that air 
monitoring immediately after Hurricane Isaac showed levels of a toxic chemical high 
enough to require use of a respirator on a levee outside the Stolthaven New Orleans 
LLC petroleum and chemical storage and transfer terminal in Braithwaite. Testing of 
floodwaters near the site revealed chemicals, but not at levels threatening to public 
health. However, the DEQ warned residents to avoid contact with floodwaters and 
sediment. The department also announced it issued a “notice of potential penalty” 
September 4 to Stolthaven for its failure to give the agency timely notice of potential 
chemical spills. September 14, a Stolthaven spokesman said the firm filed a report with 
DEQ that said up to 38,700 gallons of paraffinic oils might have been lost from two 
damaged tanks at the Plaquemines Parish facility, and some of that material may have 
moved off-site. In its September 14 news release, the DEQ said it would continue water 
and soil testing, and air monitoring. The statement said fines could reach $32,500 per 
day for each potential violation until the contamination is removed. The levee 
overtopped by Isaac was a parish-built levee that does not meet standards set by the 
U.S. Army Corps of Engineers to protect areas from surges created by a hurricane with 
a 1 percent chance of occurring in any year, also known as a 100-year event. 

Source: 

http://www.nola.com/hurricane/index.ssf/2012/09/toxins found near stolthaven b.htm 
1 
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Nuclear Reactors, Materials and Waste Sector 

7. September 17, Portsmouth Seacoast Online - (New Hampshire) NRC: ‘No concerns’ 
after Seabrook nuke plant reactor shutdown. The Seabrook Station nuclear power 
plant in Seabrook, New Hampshire, experienced a reactor trip September 14, according 
to the Nuclear Regulatory Commission (NRC). The trip occurred when a feedwater 
regulating valve shut when it should not have due to a computer card failure, according 
to an NRC statement. The plant entered a refueling and maintenance outage early 
following the shutdown. The NRC said an inspector verified that the shutdown was 
being safely and effectively carried out. 

Source: http://www.seacoastonline.com/articles/20 1 209 1 7 -NEWS- 1 209 19785 

T Return to top i 

Critical Manufacturing Sector 

8. September 17, Associated Press - (Kansas) Copper thieves cause $750,000 in 
damage. Copper thieves tore out electrical systems at the Kamen Industrial Park in 
Wichita, Kansas, causing about $750,000 in damage, the Associated Press reported 
September 17. Police said the vandals stole about 2,000 feet of copper wiring. The 
thieves hit the roof of the building tearing out electrical systems to get to the copper 
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wiring. 

Source: http://www.salina.com/news/story/copper-thefts-9-17-12 

9. September 17, The Register - (International) Got a BMW? Thicko thieves can easily 
nick it with $30 box. BMWs and other high-end cars are being stolen by unskilled 
criminals using a $30 tool developed by hackers to defeat the on-board security 
systems, The Register reported September 17. The new tool is capable of 
reprogramming a blank key, and allows non-technical car thieves to steal a vehicle 
within 2 or 3 minutes or less. On-board diagnostics (OBD) bypass tools are being 
shipped from China and Eastern Europe in kit form with instructions and blank keys, 
said a news report linking the release of the tool to a spike in car thefts in Australia, 
Europe, and elsewhere during 2012. Would-be car thieves need to grab the 
transmission between a valid key fob and a car before reprogramming a blank key, 
which can then be used to either open the car or start it, via the OBD system. “Crooks 
only need to monitor a person using the key or interrogate the key fob to get enough 
information to decipher the key,” explained a professor from the center for cyber 
security sciences at London’s City University. Weak cryptography combined with a 
“security through obscurity” approach on the OBD specification allows the tactic to 
succeed. A post from Pistonheads suggests that devices similar to those used in BMWs 
are also available for Opel, Renault, Mercedes, Volkswagen, and Toyota cars. 

Source: http://www.theregister.co.uk/2012/09/17/bmw car theft hack/ 

For another story, see item 27 
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Defense Industrial Base Sector 



Nothing to report 
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Banking and Finance Sector 

10. September 14, WAPT 16 Jackson - (Mississippi) Woman says men strapped bomb to 
her, told her to rob bank. A woman told police that she was forced to strap on a 
backpack she thought contained explosives and was told to rob a Canton, Mississippi 
bank, the Associated Press reported September 14. The woman walked into a 
Trustmark bank and told employees she had a bomb and they should call police, the 
Canton police chief said. She told police that two men attacked and kidnapped her near 
a gas station in Canton. The men threatened to kill the woman and hurt her child if she 
did not rob the bank, the police chief said. She told police the men told her to keep the 
bank doors open so they could watch her during the robbery. Police closed down some 
of the streets in the area for several hours and told residents they were to stay inside 
with their doors locked. FBI officials said it had not been determined if the device was 
an actual bomb. The backpack was safely detonated by bomb squad members. 
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Source: http://www.wapt.com/news/central-mississippi/Police-Men-strapped-bomb-to- 
woman-told-her-to-rob-bank/-/9 1 56946/1 6604466/-/r8nyof/-/index.html 



11. September 14, KCBS 2 Los Angeles - (California) ‘Desperate Bandit’ strikes again in 
Tustin, Chino. Officials said the “Desperate Bandit” hit a Tustin, California bank 
September 14, and also robbed a bank in Chino later that day. In the first robbery, the 
FBI said the man walked into a Bank of the West branch, passed a note to a teller, and 
left with about $240. The bandit is also believed to have previously robbed US Bank 
branches in Chino and Anaheim. In each of the reported robberies, the suspect has 
handed over typed notes and describes his financial situation as “desperate,” hence the 
nickname. 

Source: http://losangeles.cbslocal.com/2012/09/14/desperate-bandit-strikes-again-in- 
tustin-chino/ 



12. September 14, Associated Press - (National) 7 charged in $17M multistate fraud 
schemes. A federal indictment unsealed September 14 charged seven people with 
running a multistate Ponzi scheme and related mortgage fraud scams that prosecutors 
said cost investors and lenders a combined $17 million. The years-long investigation 
resulted in the arrest of a man and his father-in-law, who were charged with operating 
Loomis Wealth Solutions, a fraudulent California-based investment fund that cost more 
than 100 investors more than $7 million. They and five other defendants are also 
charged in a 50-count indictment with costing lenders $10 million in losses through two 
mortgage fraud schemes involving about 200 properties in Arizona, California, Florida, 
and elsewhere. 

Source: http://www.mercurynews.com/breaking-news/ci 21548696/7-charged-17m- 
multistate-fraud-schemes 



13. September 13, Bloomberg News - (National) Canadian man pleads guilty in $130 
million Ponzi scheme. A Canadian man pleaded guilty to charges he ran a $130 
million Ponzi scheme selling fraudulent certificates of deposit to 1,200 people through 
banking entities he controlled, U.S. prosecutors said. The man admitted that from 
January 2004 to March 2009 he and others sold more than $129.5 million of bogus CDs 
to investors, causing losses of more than $75 million. He pleaded guilty to 18 counts of 
conspiracy, mail and wire fraud, and tax evasion, prosecutors said. The man 
surrendered voluntarily, has been in custody since April, and is cooperating with the 
government to recover funds, his lawyer said. He faces as long as 20 years in prison 
and a fine of twice the loss for the most serious charges. 

Source: http://www.bloomberg.com/news/2012-09-14/canadian-man-pleads-guilty-in- 
130-million-ponzi-scheme.html 
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Transportation Sector 

14. September 14, KTLA 5 Los Angeles - (California) Montebello bus plunges off 110 
freeway overpass. A Montebello transit bus plunged off a bridge over the 110 Freeway 
in downtown Los Angeles September 14. The bus broke through a barrier on the 6th 
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Street bridge and landed on the 1 10 North at the 3rd Street off-ramp. A Los Angeles 
Fire Department spokesman said the bus was parked when its brakes gave out causing 
it to break through the guard rail and plunge to the road below. No one was on the bus 
at the time. The 6th Street bridge was closed, as was the 3rd Street ramp while a heavy 
tow truck was brought in. 

Source: http://www.ktla.eom/news/l anding/ktla-bus-off-bridge,0,5277480. story 
For more stories, see items 10 , 15 , 17 , 46 , and 49 
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Postal and Shipping Sector 

15. September 17, North County Times - (California) Bomb squad explodes suspicious 
device. Authorities received a call about a suspicious device found in a mailbox 
September 17 in Encinitas, California, said a police spokesman. An investigation of the 
suspected pipe bomb prompted authorities to close La Costa Avenue, causing a traffic 
mess for morning commuters. An anonymous caller told authorities about the device. 
The device, later determined to be a fake, was described as about 12 inches long and 
one inch think with black tape at the end and a “realistic looking timer.” A bomb squad 
exploded the device. 

Source: http://www.nctimes.com/news/local/encinitas/encinitas-bomb-squad-explodes- 
realistic-pipe-bomb/article fa31a6f2-9350-5e8d-87bd- 
5()c()09c36d78.htmr. ) comment form=true 

T Return to top i 

Agriculture and Food Sector 

16. September 15, WISH 8 Indianapolis - (Florida; National) Chicken strips recalled 
after plastic found inside. Serenade Foods, Inc is recalling about 2,250 pounds of 
crunchy chicken strip products that may contain fragments of plastic, the U.S. 
Department of Agriculture’s Food Safety and Inspection Service (FSIS) announced 
September 14. The 7.5 pound cases of 30 ounce cartons of “Milford Valley Farms 
Crunchy Chicken Strips” are being recalled from Serenade Foods. The products have a 
use by date of January 17, 2014 and were packaged January 17, 2012. They were 
shipped to a distributor in Lakeland, Llorida, for further distribution. The company 
alerted LSIS of the problem after receiving two consumer complaints. LSIS and the 
firm have received no reports of injury or illnesses associated with consumption of this 
product. 

Source: http://www.wishtv.com/dpp/news/indiana/fda-recalls-chicken-strips 

17. September 15, Hackensack Record - (New Jersey) Fire destroys West Milford 
deli. Short-handed West Millford, New Jersey firefighters needed help from 
departments across the northern area of the State to battle a fire early September 14 that 
burned a bar and deli to the ground and ignited four propane tanks that launched flames 
30 feet into the air. The flames kept firefighters at bay for almost 2 hours, making it 
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impossible to extinguish the fire before the deli burned to the ground. More than 60 
firefighters from 21 municipalities doused the smoldering debris. They estimated that 
losses from the fire will exceed $500,000. Police shut down part of Greenwood Lake 
Turnpike, a major thoroughfare, while firefighters hosed the building down and 
excavators demolished it. The fire apparently started in the kitchen. 

Source: http://www.northiersey.com/news/passaic morris/169857836.html?page=all 

18. September 14, U.S. Food and Drug Administration - (National) Cut Fruit Express, 
Inc. announces a voluntary recall of Fresh Cut Fruits products containing 
cantaloups because of possible health risk. Cut Fruit Express, Inc. of Inver Grove 
Heights, Minnesota, is voluntarily recalling packaged fruit products containing 
cantaloupes, distributed through September 5 since they contain cantaloupe which was 
recalled by supplier DFI Marketing Inc., due to potential contamination with 
Salmonella. No illnesses were reported specific to the Cut Fruit Express Products that 
are the subject of this voluntary, precautionary recall. The voluntary recall extends only 
to the products sold in Iowa, Michigan, Minnesota, and Wisconsin. 

Source: http://www.fda.gov/Safety/Recalls/ucm319523.htm 

19. September 14, Mount Pleasant Patch - (South Carolina) Sewage spills halt clam 
harvest. A clam farm near Mount Pleasant, South Carolina, was closed at least until 
September 26 after approximately 900,000 gallons of sewage contaminated local water, 
according to the Charleston Post and Courier September 14. To make matters worse, 3 
days later, about 470,000 gallons of partially treated wastewater overflowed at the 
Sullivan’s Island treatment plant. The farm could re-open after a State inspection later 
in the month. Both spills were attributed to heavy rains that overburdened sewage 
systems. 

Source: http://mountpleasant-sc.patch.com/articles/sewage-spills-halt-clam-season 

For more stories, see items 24 and 42 
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Water Sector 

20. September 16, KSL 5 Salt Lake City - (Utah) Cedar Hills residents get giardia 
parasite from dirty water supply. Since early July, residents in a Cedar Hills, Utah, 
neighborhood, kept getting sick, with symptoms worsening by September, KSF 5 Salt 
Fake City reported September 16. Several residents were diagnosed with giardia, a 
parasite that can be found in water, uncooked food, excrement, and soil. The only 
common factor among the 13 affected houses was dirty yellow water. The area had 
been receiving water from Manila Water Company until that company went bankrupt 
earlier in the summer. July 5, a private contractor moved its line to an existing Cedar 
Hills system, the same time residents began falling ill. “We did find a cross-connect in 
(a) cluster of valves where there was a 2-inch lateral tied from the culinary irrigation to 
the pressurized irrigation,” said the city manager. A small, unknown pipe was allowing 
in secondary water but the city was unaware and it was never identified on the 
construction plan. That pipe has since been patched and the city flushed the system 
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with chlorine and fresh water. It will be testing the water through September 21 to 
make sure the giardia is contained. A notice asking residents to boil their water to kill 
off the germ was expected to be lifted within a week. 

Source: http://www.ksl.com/?nid=148&sid=22 177222 

For more stories, see items 6 and 19 
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Public Health and Healthcare Sector 



21. September 14, Washington Post - (Maryland) NIH superbug claims 7th victim. A 
deadly, drug-resistant superbug outbreak that began during the 2011 summer at the 
National Institutes of Health Clinical Center claimed its seventh victim September 7, 
when a seriously ill boy from Minnesota succumbed to a bloodstream infection, 
officials said September 14. The boy was the 19th patient at the research hospital to 
contract an antibiotic -resistant strain of the bacterium Klebsiella pneumoniae that 
arrived in August 201 1 with a New York woman who needed a lung transplant. But his 
case marked the first new infection of this superbug at NIH since January — a 
worrisome signal that the bug persists inside the huge brick-and-glass federal facility in 
Bethesda, Maryland. 

Source: http://www.washingtonpost.com/national/health-science/nih-superbug-claims- 
7th-victim/20 1 2/09/1 4/09b3742e-fe9b- 1 1 e 1 -b 1 53-2 1 8509a954e 1 story.html 

22. September 14, Dallas Morning News - (Texas) Frisco couple, Plano man indicted on 
health-care fraud charges. Three people were arraigned in federal court in Texas, 
September 13 and indicted on charges including conspiracy, health care fraud, making 
false statements to a financial institution, and engaging in illegal monetary transactions 
with fraud proceeds, said the U.S. attorney’s office. The three owned and operated 
various hyperbaric oxygen therapy companies in north Texas, Houston, and San 
Antonio. The indictment stated, they engaged in a scheme between 2008 and 2011 to 
defraud Medicare by double -billing for the physician supervision and attendance of 
oxygen-therapy-related services. Two of the suspects also face charges alleging they 
made material false statements to a financial institution to obtain a $1.3 million 
residential loan in Dallas. The indictment states the couple failed to disclose their $2.15 
million Frisco home in the loan paperwork. Each pleaded not guilty. 

Source: http://friscoblog.dallasnews.com/2012/09/frisco-couple-plano-man-indicted- 
on-health-care-fraud-charges.html/ 
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Government Facilities Sector 



23. September 17, Associated Press - (New Jersey) Security high at Teaneck-Northern 
Valley Regional HS football game after shooting threat. Extra police were on duty 
September 16 at the rescheduled Teaneck-Northern Valley Regional, New Jersey high 
school football game, which was canceled abruptly September 15 after school officials 
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learned of a “shooting threat” before the game. Police said after the game that there 
were no incidents and they are still investigating the threat. Teaneck school 
administrators made the police aware of the situation sometime after 5:30 p.m. 
September 15. The game was 15 minutes from kickoff when an announcement was 
made over the public address system that it was being postponed. Teaneck’ s athletic 
director called the threat “credible.” 

Source: 

http://www.northiersev.com/sports/hs sports/Police security stepped up for todays 
Teaneck-Northern Valley Regional HS football game.html 

24. September 17, Associated Press - (International) Violence over anti-Islam film in 3 
nations. Demonstrations against an anti-Islam film turned violent the weekend of 
September 14 outside a U.S. Consulate in Karachi, Pakistan, the U.S. Embassy in 
Jakarta, Indonesia, and a U.S. military base in Afghanistan. Hundreds of protesters 
clashed with police when they tried to storm the U.S. Consulate in Karachi. One 
protester was killed and more than a dozen were wounded. In Jakarta, hundreds of 
Indonesians angered over the film clashed with police outside the U.S. Embassy, 
hurling rocks and firebombs and setting tires alight outside the mission. At least 10 
police were rushed to the hospital after being pelted with rocks and attacked with 
bamboo sticks, said Jakarta’s police chief. He said four protesters were arrested and one 
was hospitalized. Demonstrators burned a picture of the U.S. President and also tried to 
ignite a fire truck parked outside the embassy after ripping a water hose off the vehicle 
and torching it, sending plumes of black smoke billowing into the sky. Police used a 
bullhorn to appeal for calm and deployed water cannons and tear gas to try to disperse 
the crowd. In the central Java town of Solo, protesters stormed KFC and McDonald’s 
restaurants, forcing customers to leave and management to close the stores. 

Source: http://www.navvtimes.com/news/2012/09/ap-afghan-protest-over-anti-islam- 
film-turns-violent-09 1712/ 



25. September 14, Associated Press - (Ohio) Ohio college safe, reopened after bomb 
threat. Hiram College officials gave the “all clear” and reopened their northeast Ohio 
school September 14, after an hours-long sweep found nothing suspicious following a 
bomb threat. A college spokesman said the campus community was alerted that the 
school was safe. The college received an emailed bomb threat about 4 p.m. and ordered 
everyone on campus to evacuate. The spokesman said State and Federal authorities 
were notified about the email, and safety teams with bomb-sniffing dogs checked the 
campus “room by room, building by building.” The school said on its Web site that it 
continues an investigation to identify the person responsible for the threat. Bomb 
threats also caused evacuations September 14 at campuses in Texas and North Dakota. 
Students with no place to go went to a church and village hall off campus. Firefighters 
advised people during the evacuation to avoid the area. 

Source: http://www.seattlepi.com/news/article/Ohio-college-safe-reopened-after-bomb- 
threat-38665 15.php 
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Emergency Services Sector 



26. September 16, Waco Tribune-Herald - (Texas) Bosque County sheriff moves 
dispatch center after 2 fall ill. The Bosque County Sheriff’s Department closed down 
the room holding its dispatch center in Meridian, Texas, September 15 after two 
employees called in sick with conditions that may relate to air quality in the room, the 
chief deputy sheriff said. Authorities moved the dispatch operations to the county’s 
emergency operations center with the permission of the county emergency management 
coordinator. He said the sheriff’s administrative lines have been forwarded to the 
emergency center, which cannot receive 9-1-1 calls. Calls to 9-1-1 were being 
forwarded to Hill County, which notifies Bosque County immediately. The chief 
deputy sheriff said the building, which also houses the jail, has had problems for some 
time with sewage backing up. He said no inmates have reported illnesses that might be 
related to the sewage backups. 

Source: http://www.wacotrib.com/news/crime/169932716.html 

27. September 15, Associated Press - (National) Safety regulators looking at Ford police 
cars. Government safety regulators are investigating Ford’s Crown Victoria police cars 
due to complaints about defective steering columns, the Associated Press reported 
September 15. The probe affects about 195,000 cars from the 2005 through 2008 model 
years. The government has received three complaints that part of the steering column 
can separate and cause loss of steering control. No crashes or injuries were reported, 
the National Highway Traffic Safety Administration said in documents posted 
September 15 on its Web site. Investigators will determine if the cars have a safety 
defect and whether a recall is needed. So far the vehicles have not been recalled. A 
Ford spokeswoman said that the company is aware of the investigation and is 
cooperating. The investigation only affects police versions of the Crown Victoria, she 
said. The Montgomery County, Maryland, Police Department said earlier the week of 
September 10 it was inspecting its 324 Crown Victorias because of a steering problem 
with its cruisers. Police in Tucson, Arizona also recently began inspecting its fleet of 
Crown Victorias. The police officer union says that at least six vehicles were found to 
be deficient and in need of repair. 

Source: http://www.dailvherald.com/article/20120915/business/709159881/ 

28. September 15, Toledo Blade - (Ohio) Ohio fire station closed due to safety 
concerns. The fire chief ordered a Toledo, Ohio fire station closed September 13 after 
crews discovered the floor had cracked and shifted. Crews and equipment from Station 
3 were moved to East Toledo’s Station 13, with concerns that the floor could collapse 
as a fire engine would back into the apparatus bay, said the fire lieutenant. Fire officials 
do not expect the change in stations to impact calls for service very much, if at all. 

Other stations will help pick up calls for service. Station 3 crews will stay at Station 13 
until a temporary garage next to the Bush Street location is built so the engine can be 
stored there. From there, officials will look at permanent solutions. 

Source: http://www.firehouse.com/news/1078Q239/ohio-fire-station-closed-due-to- 
safety-concerns 
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29. September 14, WSPA 7 Spartanburg - (South Carolina) South Carolina inmates with 
illegal phones guide officer rescue. The South Carolina Department of Corrections 
still does not know yet exactly what led to a hostage situation at Lee Correctional 
Institution in Bishopville September 13 because investigators have not interviewed the 
officer who was taken hostage. After being rescued, he was taken to the hospital with 
minor injuries. The incident started in one of the dorms at Lee. The department’s Rapid 
Response Team was able to get the situation under control 5 hours later, and find the 
officer handcuffed in a broom closet. Inmates using illegal cell phones called prison 
officials and led them to the officer’s location. 

Source: http ://w w w2 .wspa.com/news/20 1 2/sep/ 1 3/8/report- sc-officer-held-hostage- 
inmates-prison-ar-4539350/ 

30. September 13, KOIN 6 Portland - (Oregon) Report: Portland police using excessive 
force against mentally ill. Portland, Oregon police officers use excessive force against 
people with mental illnesses, a U.S. Department of Justice (DOJ) report has found. The 
DOJ presented its findings at a press conference September 13 The investigation, which 
began in June 2011, determined that the “Portland Police Bureau (PPB) has engaged in 
an unconstitutional pattern or practice of excessive force against people with mental 
illness,” said a press release. The joint investigation by the Civil Rights Division 
Special Litigation Section and the U.S. Attorney’s Office for the District of Oregon 
focused heavily on police response to mental health situations. At the September 13 
press conference, the assistant Attorney General for the Civil Rights Division said that 
over the last 3 years, Portland police have used deadly force 12 times, 10 of which 
involved people with mental health issues. A preliminary agreement has since been 
reached to make changes to PPB officer training, practices and supervision, the DOJ 
said. 

Source: http://www.koinlocal6.com/content/breaking/story/Report-Portland-police- 
using-excessive-force/FvH7faP4ikqYZnnoNS5fvQ.cspx 
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Information Technology Sector 

31. September 17, The H - (International) Attackers exploit unpatched Internet 
Explorer vulnerability. According to a security specialist, a security hole in 
Microsoft’s Internet Explorer (IE) Web browser is being used by cyber criminals to 
infect computers with malware. The vulnerability, which was apparently unknown and 
unpatched until now, appears to hinge on how IE handles arrays in HTML files. So far, 
the attackers only targeted versions 7 and 8 of IE on fully patched Windows XP SP3 
systems; it is not yet certain whether the exploit can be used with other software 
combinations. The specialist discovered the code on a server apparently being used for 
targeted attacks by the Chinese hacker group known as the Nitro gang. The first exploit 
for the critical Java vulnerability Oracle fixed with an emergency patch in August was 
also found on a server that appears to be linked to the Nitro gang. In the current attack, 
a specially prepared Web page executes a Flash applet that uses heap spraying to 
distribute shellcode in the system memory. It then reloads an iframe that uses the IE 
vulnerability to run the shellcode. An analysis from security firm Alien Vault found the 
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remote administration tool Poison Ivy is currently being distributed in this way to give 
the attackers complete access to the infected system. 

Source: http://www.h-online.com/security/news/item/Attackers-exploit-unpatched- 
Internet-Explorer- vulnerability- 1 7 09592 .html 

32. September 17, Help Net Security - (International) Linkedln-themed spam using data 
stolen in June breach? Spoofed Linkedln emails notifying recipients of messages 
requiring their attention are not new, but ones being distributed recently appear to be 
more targeted than usual. The emails supposedly come from Linkedln Reminders and 
usually contain “There are a total of messages awaiting your response” in the subject 
line. What makes this spam run different is that most of them landed in real accounts 
instead of spam traps, making Avira’s researchers suspect the spammers have access to 
information stolen from the professional social network during the June breach. If that 
is true, the scammers are probably having more success than usual in trying to get users 
to follow the offered link. While the link’s destination is an online pharmacy presenting 
no immediate danger to users, the destination can be changed at any time, and lead 
them to Web sites serving malware. 

Source: http://www.net-securitv.org/secworld.php?id= 13607 

33. September 15, V3.co.uk - (International) Stolen iOS data used as malware lure. The 
recent high-profile breach of Apple iOS device data has become the latest lure for 
malware writers looking to infect users. Researchers with McAfee discovered a series 
of files being advertised on download services as an archive of the data stolen by 
hackers affiliated with the Anonymous AntiSec campaign. Though the hackers claimed 
the data was lifted from the personal laptop of an FBI agent, the bureau denied the 
claim and a U.S. publisher later took the blame for the breach. According to a McAfee 
senior threat researcher, the attackers hid a trojan as a file made to look as if it 
contained the hacked data. “As you might have guessed, this file is not the real list but 
an ‘exe’ file and, of course, a malware,” he said. “[W]e recommend you take care 
before downloading an alleged sensational file.” 

Source: http://www.v3.co.uk/v3-uk/news/2205805/stolen-ios-data-used-as-malware- 
lure 



34. September 14, Threcitpost - (International) Tool scans for RTF files spreading 
malware in targeted attacks. Exploits embedded inside Microsoft Office documents 
such as Word, PDFs, and Excel spreadsheets have been at the core of many targeted 
attacks during the past 2 years. Detection of these attack methods is improving and 
hackers are recognizing the need for new avenues into enterprise networks. Some have 
been finding success using rich text format (RTF) files to spread malware that exploits 
Office vulnerabilities. In June, a researcher reported she collected 90 RTF files over the 
course of 3 months, many with China-related file names and many targeting specific 
industries. All of them were exploiting CVE-2012-0158, a vulnerability in Active X 
controls within MSCOMCTL.OCX — OLE files developed by Microsoft to allow object 
linking and embedding to documents and other files. 

Source: http://threatpost.com/en us/blogs/tool-scans-rtf-files-spreading-malware- 
targeted- attacks -091412 
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35. September 14, PCWorld - (International) Your PC may come with malware pre- 
installed. Microsoft researchers investigating counterfeit software in China found that 
new systems being booted for the first time were already compromised with botnet 
malware right out of the box. Microsoft filed a computer fraud suit against a Web 
domain registered to a Chinese businessman. The suit alleges the Nitol malware on the 
new PCs points the compromised systems to 3322.org. Microsoft believes the site is a 
major hub of malware and malicious online activity. Microsoft claimed that the site in 
question hosts Nitol, as well as 500 other types of malware. A Washington Post report 
stated it is the largest single repository of malicious software ever encountered by 
Microsoft. 

Source: 

http://www.pcworld.com/article/262325/your pc may come with malware pre insta 
lled.html 



36. September 14, Threcitpost - (International) Fake ADP and FDIC notifications leading 
users to Blackhole Exploit Kit. The latest iteration of the Blackhole Exploit Kit hit the 
Web the week of September 10 and attackers spread links to get unsuspecting victims 
to click through to the first version of the kit. Email notifications claiming to come 
from Microsoft Exchange, ADP, the Federal Deposit Insurance Corporation (FDIC), 
and other purported “trusted sources” were spotted leading Web users to pages hosting 
the original exploit kit. A notification claiming to come from payroll services company 
ADP tries to trick employees into clicking through to what appears to be their Online 
Invoice Management account to “protect the security of [their] data.” An email 
disguised as a voicemail notification from Microsoft Exchange Server tries to get users 
to click a link to listen to a voicemail. An email that appears to be from the FDIC tries 
to get users to click to download “a new security version.” 

Source: http://threatpost.com/en us/blogs/fake-adp-and-fdic-notifications-leading- 
users-blackhole-exploit-kit-09 1412 

For another story, see item 9 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



37. September 15, Greenville News - (South Carolina) Damage costly as highwire copper 
thieves disrupt cable service. Authorities in South Carolina are looking for the copper 
thief or thieves who “somehow reached the cable/phone lines measuring from one 
telephone pole to another (which is approximately 400 feet and approximately 35 feet 
from ground), cutting them, stealing the copper wiring, fibrotic cables and metal 
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conduit lines,” according to a Spartanburg County sheriff’s report. Neighbors reported 
loss of service beginning September 14. The theft in Chesnee involved equipment 
belonging to Chesnee Communications and Charter Communications, and will result in 
roughly $10,000 in repairs for each company, a sheriff’s deputy said. 

Source: 

http://www.greenvilleonline.com/article/20 1 209 1 5/NEW S/309 15011 1/Damage-costly- 
highwire-copper-thieves-disrupt-cable- 

service?odyssev=tabltopnewsltextlFRQNTPAGE&gcheck=l&nclick check=l 
For another story, see item 33 
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Commercial Facilities Sector 



38. September 17, Idaho State Journal; Idaho Standard Journal - (Idaho) Walmart bomb 
threats hit East Idaho. The nationwide bomb threat trend at Walmart stores was 
evident in Eastern Idaho September 15 during incidents in Ammon and Rexburg. The 
Rexburg Walmart and two adjacent stores, Payless Shoe Source and Sally’s Beauty 
Supply, were evacuated as police and a bomb-sniffing dog searched the Walmart. 
Police said there were no bombs present and allowed people back into all three stores. 
A few hours later Bonneville County deputies responded to two suspicious packages 
reported at the Ammon Walmart, where at least two bomb threats have been reported 
this year. The Idaho Falls Bomb Squad was called in to investigate the boxes, which 
were empty. The store was not evacuated. The Rexburg incident appears to be part of a 
national trend of bomb threats being phoned into Walmart stores via an untraceable 
Internet phone line. Several such bomb threats have been called into Walmarts 
throughout the United States in recent months, including threats called into Eastern 
Idaho Walmarts. September 1 1, a store employee made what turned out to be a false 
bomb threat at the Garden City Walmart near Boise. The store was evacuated and 
closed for an hour as police investigated. It was soon determined that the store 
employee was allegedly behind the false report. He was arrested and jailed. 

Source: http://www.idahostateiournal.com/news/local/article ca9 1 8238-0096- lle2- 
8d09-0019bb2963f4.html 



39. September 17, WNYW 5 New York; Associated Press - (New York) Dozens displaced 
in suspicious Yonkers fire. Fire officials were investigating a suspicious fire that 
broke out in Yonkers September 16. Authorities said the three-alarm blaze may have 
been intentionally set. The fire displaced 28 people and took dozens of firefighters to 
extinguish. The fire damaged five residential buildings, one was completely destroyed. 
Four residents were hospitalized for smoke inhalation. Four firefighters suffered minor 
injuries. As many as six dogs may have perished in the fire. The Red Cross set up a 
reception center at the PAF building on North Broadway to help the displaced 
residents. Twenty-seven residents registered for assistance but the organization said 
more people may have lost their homes and not yet signed up for help. 

Source: http://www.myfoxny.com/story/19558262/28-residents-displaced-in- 
suspicious-3-alarm-fire-in-yonkers 
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40. September 17, Jamestown Sun - (North Dakota) Bomb threat evacuates downtown 
Fargo Hotel. A bomb threat evacuated the downtown Radisson Hotel in Fargo, North 
Dakota, for nearly 2 hours September 15, the region’s fourth such threat in a week. A 
Fargo police lieutenant said the threat was made in a phone call to Radisson staff, at 
which point the hotel made the decision to evacuate guests. After police officers arrived 
and performed a cursory search of the building it was determined there was no validity 
to the threats made in the call. Hotel guests were allowed back into the building after 
the police cleared the scene. The incident followed similar threats to the Fargo Hector 
International Airport September 11, the Grand Forks International Airport September 
12, and North Dakota State University September 14. The police are treating 
September 15 ’s threat as separate, but are not ruling out the possibility that it is related 
to the others made over the week. 

Source: http://www.iamestownsun.com/event/article/id/169425/group/News/ 

41. September 17, Associated Press - (Utah) 2 arrested in chemical spray release at 
Riverton Walmart. Two suspects were arrested on suspicion of releasing a pepper 
spray-like substance in a Walmart in Riverton, Utah, that prompted an evacuation of 
the store. A Unified Police Department lieutenant said that about 80 people were 
treated at the scene and 3 people were sent to local hospitals after the incident 
September 16. Authorities released photographs of the two suspects and police received 
a tip that they were at a certain location in Herriman, Utah. The two suspects were 
booked into the Salt Lake County Jail. One was arrested on various charges, including 
felony counts of terroristic threats, causing a catastrophe, aggravated assault, and 
obstructing justice. The other was booked on a misdemeanor count of assault and a 
felony count of obstructing justice. 

Source: http://www.standard.net/stories/2012/09/17/2-arrested-chemical-sprav-release- 
riverton-walmart 



42. September 17, Associated Press; WMAQ 5 Chicago - (Illinois) Teen charged with 
Chicago bomb plot due in court. A man accused of trying to detonate a car bomb 
outside a bar in downtown Chicago was scheduled to appear in federal court September 
17. Prosecutors said an undercover agent gave the man a phony car bomb and watched 
him press the trigger. He was charged with attempting to use a weapon of mass 
destruction and attempting to damage and destroy a building with an explosive. Federal 
prosecutors said the device was harmless and the public was never at risk. An affidavit 
said the man was active in jihadist Internet forums. The FBI said he searched online for 
information about making bombs and he was offered several chances to walk away 
from the plot. He was arrested September 14. 

Source: http://www.nbcchicago.com/news/local/Teen-Charged-With-Chicago-Bomb- 
Plot-Due-in-Court- 17001 05 26 .html#ixzz26kAmIgLL 

43. September 16, KOKH 25 Oklahoma City - (Oklahoma) Three alarm fire damages 
Beds Direct warehouse. A three alarm fire damaged the Beds Direct warehouse in 
Oklahoma City, September 16. City firefighters said they believe the fire sparked from 
a pick-up truck parked inside the building. Employees at Beds Direct told reporters 
when they heard the fire alarm go off they walked into the warehouse and saw the truck 
engulfed in flames. Firefighters had the flames contained within hours. They said the 
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fire destroyed hundreds of beds and other furniture stored in the warehouse and 
estimated the fire caused $230,000 in damage. 

Source: http://www.okcfox.com/newsroom/top stories/videos/kokh vid 6970.shtml 

44. September 16, WOWT 6 Omaha - (Nebraska) 40 residents displaced by apartment 
fire. An apartment fire in Omaha, Nebraska, displaced 40 residents September 16. 
Firefighters were called to the Sierra Place Apartments and radio reports indicated three 
people trapped on a third-floor balcony were rescued. The fire was under control about 
a half-hour later. An estimated 30 units were damaged by flames, smoke, or water. 
Source: http://www.wowt.com/news/headlines/Fortv-Forced-From-Homes-Bv- 
Apartment-Fire-169949836.html 

45. September 16, Chicago Sun Times - (Illinois) 15 injured in chlorine leak at fitness 
center. Fifteen people were taken to four area hospitals September 14 after apparently 
being overcome by chlorine fumes inside a popular health club in Warrenville, Il linois. 
“All of the apparent injuries were non-life-threatening, ’ said a spokesman for the 
Warrenville Fire Protection District chief. Firefighters and paramedics from 10 local 
fire agencies responded. The incident occurred at Lifetime Fitness in the Cantera office 
and business development. The affected patrons and employees reported suffering 
headaches and dizziness. The spokesman said he did not know the source of the 
apparent chlorine leak. The club has an indoor swimming pool. The center closed 
following the incident. 

Source: http ://beaconnew s . suntimes .com/news/ 15155184-418/15 -injurcd-during- 
chlorine-leak-at-warrenville-fitness-center.html 



For more stories, see items 5, 17, 46, and 49 
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National Monuments and Icons Sector 



46. September 17, Palm Springs Desert Sun - (California) Southern California battles 
blazes. Brush fires in southern California over the weekend of September 15 blackened 
about 1,300 acres and threatened an upscale beach resort, Marine base, and an art 
museum. Residents voluntarily evacuated and one firefighter was injured, but no 
structural damage was reported. Smoke was visible September 16 over Camp 
Pendleton, where about 1,200 acres were blackened since it first started. A Marine 
spokesman said the fire, in the north-central section of the base, was believed to have 
started during artillery training. The fire was about 70 percent contained by September 
16. Los Angeles firefighters September 16 contained a 90-acre brush fire on the 
mountain near the famed Getty Center art museum. The blaze erupted September 14 on 
the east side of the busy Interstate 405. The Getty Center evacuated visitors and staff 
September 14 as a precaution and closed. Access roads to the museum were closed off 
and on. 

Source: 

http://www.mvdesert.com/viewart/20120917/NEWS0803/309170018/Southern- 

Califomia-battles-blazes 
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47. September 17, KNDU 25 Kennewick; KNDO 23 Yakima - (Washington) More than 90 
wildfires continue to burn. Over 900 firefighters are still battling around 90 wildfires 
in Washington’s Yakima and Kittitas Counties that were sparked by lightning storms 
the week of September 10. Two fires are steadily growing, and more firefighters from 
out of State were being called in to help. The Table Mountain Fire was growing larger, 
and around 100 people were evacuated from the town of Liberty. Two hundred others 
have been put on alert. The Wild Rose Fire near Rimrock Lake has grown to nearly 
3,000 acres, has reached State Highway 12. Air quality is poor, and people were 
encouraged to limit strenuous outdoor activities. About 6,000 acres are burning, and 
firefighters said they are at 10 percent containment. A State- wide burn ban has been 
issued by the governor. Firefighters said this is for good reason since conditions are the 
driest they have seen in years, and no rain is predicted until the week of September 24. 
Source: http://www.kndo.com/storv/19558189/more-than-90-wildfires-continue-to- 
bum 
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Dams Sector 



48. September 15, Vancouver Columbian - (Washington) Condit Dam removal 

complete. Demolition crews removed the last of Condit Dam from the White Salmon 
River in Washington, a PacifiCorp official confirmed September 15. The 
announcement was a milestone for the removal that began with a blast of dynamite in 
2011, the Vancouver Columbian reported. It also met a September 15 deadline for in- 
water work to be finished. Even though the dam itself is gone, crews were still working 
near the river and have yet to give the green light for recreation. The White Salmon 
River remained open upstream of Northwestern Lake Park. Crews were working on the 
125-foot-tall structure in earnest since spring, removing about 35,000 cubic yards of 
concrete. 

Source: http://www.columbian.com/news/2012/sep/15/crews-complete-removal-condit- 
dam-white-salmon-riv/ 



49. September 15, Salt Lake Tribune - (Utah) Santa Clara tallies damage, cleans up 
flood. After heavy rains breached an earthen dike, flooding dozens of homes and 
businesses in Santa Clara, Utah, September 11, crews were building a new emergency 
runoff channel from the retention pond the dike helped contain. The city manager said 
September 13 that public works employees were laying out large wooden pallets laden 
with sandbags along a route through open fields toward the Santa Clara River. The plan 
is for quick construction of a runoff pathway to rechannel subsequent storms away 
from homes and businesses, he said. Meanwhile, a state engineer’s report mentioning 
rodent holes in the failed, 93-year-old dike — cleared by inspectors in April — came to 
light September 13. “All earthen dams and dikes have rodent holes, that’s just their 
nature. We’ve stayed on top of those, so while rodent holes could be a contributing 
factor, they are only one of many possible causes,” the manager said. Another factor 
may have been a drain within the dike that apparently was overwhelmed. The manager 
said the rechanneling route would be Santa Clara’s primary response to future flooding 
for at least a year, until the dike is repaired or replaced. 
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Source: http://www.sltrib.com/sltrib/news/54888439-78/clara-dike-santa- 
dickie.html.csp 

For another story, see item 6 
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